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(57) A method of providing a service, such as local 
number portability (LNP), in a switched teiecorrimunica- 
tions system, in which a message interceptor is dis- 
posed in a signalling link of an SS7 signalling network 
of the system. The message interceptor detects calls for 
which service implementation is required, by comparing 
the content of intercepted circuit-related SS7 messages 
with senrice trigger conditk)ns. such as message type 
(checked directly by Itie interceptor) and message con- 
tent (e.g. called numt)er, which the interceptor checks 



by reference to a database). When sendee implemen- 
tation is detected as being required, the message inter- 
ceptor may implement at least part of the required sen^- 
ice by modifying parameters of the intercepted mes- 
sage; altematively, the interceptor may re-direct the 
message to a service control function for service imple- 
mentatnn. The invention enables services to be imple- 
mented without incurring inefficient use of core network 
resources, and without expensive and time-consuming 
modificatkxi of switch and SCR control software. 
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Description 

Technical Field 

The present invention relates to a method of provid- 
ing a service in a switched telecommunications system 
and a message interceptor suitable for use in this meth- 
od. In particular, but not exclusively, the present inven- 
tion relates to a service providing method and message 
interceptor for use in a switched telecommunications 
system having a signalling network operating substan- 
tially in accordance with Signalling System r4o.7, wheth- 
er as specified by the CCITT, ANSI. ETSI (for GSM), 
Bellcore or similar body, such a network being herein 
refen^ed to as an SS7 network. The CCITT Signalling 
System Number 7 is specified in Recommendations Q. 
700-Q.716 CCITT Vblume VI - Fascicle VI.7, Geneva 
1 989, ISBN 92-61 -0351 1 -6 which is herein incorporated 
by reference. 

Background of the Invention 

Signalling in Modem Telecommunications Systems 

In modem switched telecommunicatk>n systems (in 
particular, modern PSTNs) it has become conrvnon 
practk:e to provide two related but separate network en- 
f rastructures: a t>earer or trartsmtsskm network for car- 
rying end-user voice and data traffic, and a stgrtatling 
network for controOrig the setup and release of bearer 
channels through the bearer network nn accordlance with 
control signals transferred through the signalling net- 
work. In practk^e such signalling networks comprise 
high-speed computers interconnected by signalling 
links; computer programs control the computers to pro- 
vide a set of operatkDnal and signalling functk)ns in ac- 
cordance with a standardized protocol. example of 
such a signalling protocol is the afore-mentkyied Sig- 
nalling System No. 7 (SS7) whk*i is being extensrvety 
depbyed for control of telephone artd other data trans- 
mission networks. An SS7 network basically compr^es 
various types of signalling points, namely, signalling erxJ 
points (SEPs) and signalling transfer points (STPs) ir>- 
terconnected by signalling links, the SEPs being asso- 
ciated for example with respective servk:e switching 
points (SSPs) of the transmission network, and with 
sendee control points (SCPs). 

Referring to Figure 1 , an SS7 network 10 is shown 
inter-communicating three signalling end points consti- 
tuted by two senrice switching points SSPs 11 (between 
which extend speech circuits 12 of a transmission net- 
wortc not further illustrated) and a senrice control point 
SCP 13. The SOP serves to implenr^ent particular serv- 
ices (sometimes called IN, or Intelligent Network, serv- 
ices) in response to sewice requests received from an 
SSP, such a service request being generated by an SSP 
upon certain trigger conditkxis being met in the SSP in 
respect of a call that it is handling. A typical service may 



involve the translation of the dialled number (called party 
number) to a different number, the SCP returning this 
latter number to the SSP to enable the latter to complete 
call setup. 

5 The SS7 networic 10 includes two pairs 14 of sig- 
nalling transfer points STPs, and a plurality of link sets 
18 interconnecting the SSPs, SCP and STPs into a re- 
dundant network. Each signalling link set 18 is made up 
of one or more individual signalling links, the number of 

10 signalling links in a link set being chosen to provide ap- 
propriate capacity for the level of signalling traffic ex- 
pected. The redundancy provided in respect of the STPs 
and links is to ensure that the failure of a single compo- 
nent of the network core does not cause the whole net- 

15 work to fail. 

It shoukJ be noted that an SS7 network will typfcally 
comprise more STP pairs, SSPs and SCPs than illus- 
trated. Service control functbnality, as well as being pro- 
vkled in an SCP, can be provided in an Adjunct directly 

^ corrected to an SSP. 

Messages traversing the links of the network may 
be any of a large number of different types, depending 
on the nature of the call to which the message relates 
and the function specified by the message. 

25 

The SS7 Architecture 

In order to facilitate an understanding of the present 
tnventkxi, a brief review will be given of the layered 

30 structure <rf the SS7 architecture and of the messages 
passed over the links erf the networic 10 to implennent 
the SS7 architecture. 

Figure 2 illustrates the SS7 architecture. Levels 1 
to 3 (referenced 21 , 22, 23) fomn the message transfer 

35 part (MTP) 24. The MTP 24 is responsible for transfer- 
ring signalling information between signalling points in 
messages. Level 4 (not referenced as a whole) compris- 
es ctrcurt-related user parts, namely ISDN User Part (IS- 
UP) 26 and Telephone User Part fTUP) 27. These user 
parts define the meaning of the messages transferred 
by the MTP 24 and provide functionality to the users of 
SS7 (bkx:k 29). The user parts 26 and 27 are specrfrc 
to particular types of circuit-related applications as indi- 
cated by their names. In fact, the ISUP is the most inr>- 

^ portant user part, the TUP being a subset df ISUP and 
havir^g been largely replaced by the latter Most inter- 
exchange signalling, such as between SSPs 11 in Fig- 
ure 1 , uses ISUP messages. 

SS7 level 4 also includes f unctkxial elements defin- 

50 ing a general protocol for non-circuit-related informa- 
tion, such as operations, maintenance and administra- 
tion information or network database infonmatkxi (pro- 
vided, for example, from an SCP 13). The main func- 
tional element in this Level 4 protocol is the Transactk)n 

56 Capabilities (TO) 30 which sits on top of a Signalling- 
Connectkxi-Control Part (SCCP) 31 and beneath a TC 
Users element 32. The SCCP 31 actually forms part of 
the transfer mechanism for non-circuit-related applica- 



2 



3 



EP 0 792 074 A2 



4 



tions, combining with MTP 24 to provide a transfer 
mechanism meeting the Open Systems Interconnection 
(OSI) Layer 3^4 boundary requirements. Users of the 
SCCP/rc stack include the INAP (Intelligent Network 
Application Part) 32 and MAP (Mobile Application Part) 
33. With reference to Figure 1 . messages passed be- 
tween an SSP 11 (Figure 1) and SCP 13 will be INAP 
messages using SCCP/fC. Some inter-exchange sig- 
nalling may also use SCCP/TC messages where, for ex- 
ample, the purpose of the signalling is service related 
rather than circuit related. ISUP may also use the SCCP 
lor certain messages. 

Considering the MTP 24 in a little more detail. Level 
1 (reference 21) defines the physical, electrical and 
functional characteristics of the transmission path for 
signalling. MTP Level 2 (reference 22) defines the func- 
tions and procedures for the transfer of signalling mes- 
sages over a link between two directly-connected sig- 
nalling points. MTP Level 3 (reference 23) provides 
functkxis for the reliable transfer of signalling infonma- 
tk>n from one signalling end point to another. Thus, Level 
3 is responsible for those functk>ns that are appropriate 
to a number of signalling links, these being separable 
into signalling-message handling functkxis and signal- 
ling-network management functkxis. 

When conskiering the passing of messages over a 
single link, it is the combination d Levels 1 arxl 2 that 
provides for the reliable transfer of signalling informa- 
tion. The Level 2 functions provkle a framewcxk tn whk:h 
the informatkan is transferred and pertorms error-detec- 
tion and error-correctkx) processes; the Level 2 func- 
tkxis are carried out afresh on a Innk-by-tink basis. At 
Level 2. information is seen as being transferred be- 
tween signalling points in messages known as "signal 
units". 

The general form a signal unit 40 is shown In Fig- 
ure 3. As can be seen, a field 41 carrying message/data 
is encapsulated in a Level 2 framework comprising the 
folbwing fiekis: a flag field; a backward sequerK:e 
number fieki (BSN); a backward-indkator bit (BIB); a 
fonward sequence number field (FSN); a forward-indi- 
cator bit (FIB); a length indicator fieki (LI); a spare fiekl 
(SP); a check field; and a tenminatirtg flag fiek). The bit 
lengths of these fields are also irKficated in Figure 3. The 
FSN, FIB, BSN, BIB and check fiekis prcvkto error cor- 
rectkxi f unctkxiality at link level in a manner well under- 
stood by persons skilled in the art. 

There are three types of signalling unit: 

MSU - the Message Signal Unit - MSUs carry all 
service/applicatbn data sent on the SS7 network. 
The amount of data per MSU is limited to 273 octets 
maximum. 

- LSSU - the Link Status Signal Unit - LSSUs carry 
informatkm relating to the status of the link and are 
therefore concerned with Level 2 functkxis. Normal- 
ly, LSSUs are only seen during the initial alignment 
procedure when a link is brought into sendee but 



are used at other times, for example, to stop the flow 
of signal units when processors are busy. 
" FISU - the Fill-ln Signal Unit - When no MSUs or 
LSSUs are to be sent, a signalling point continually 
sends FISUs. FlSUs carry basic Level 2 information 
only, for example, the acknowledgement of the last 
MSU (fieW 41 is empty). 

The length indicator (LI) within each message indicates 
the signal unit type as folbws: LI = 0 means FISU; LI := 
1 or 2 means LSSU; and LI = 3 or more means MSU. 

Figure 3 further illustrates at 42 the basic format of 
an MSU; as can be seen, it comprises a service infor- 
matbn octet SIO of 8 bits and a signalling informatkxi 
field SIF of 8n bits, where n is a positive integer. The 
SIO fieki irK:ludes a Servbe Indicator subfield that de- 
fines the user part or equivalent appropriate to the mes- 
sage. The SIF contains the information being trans- 
ferred and will generally include a routing label 43 com- 
prising a 14-bit destination point code (DPC) indicating 
the destination signalling end point, a 14-bit originating 
point code lndk:atlng the originating signalling end point, 
and a 4-bit signalling link selection fieki for specifying a 
particular link in cases where two signalling points are 
linked by a multiple-link link set. The MTP 24 Is not 
aware of the contents of the SIF other than the routing 
label. 

As an example of the information that may be bome 
by an MSU, where a call is being set up, the first ISUP 
message to be sent out by the calling-party exchange 
is an initial-address message (lAM) whk:h will contain 
the required address (e.g. the digits dialled by the calling 
customer) and It results In a seizure of a circuit by each 
exchange along the route to the called-party exchange. 
Figure 4 Illustrates the general format of an ISUP mes- 
sage. Thus, an ISUP message comprises. In addition to 
the routing label 43. a cIrcuitHdentification code (CIC) 
44 indicating the numt)er of the speech circuit between 
two exchanges to which the message refers, a message 
type code 45 (set to 00000001 for an 1AM), and a 
number of parameters organised Into three parts 46, 47, 
48 according to type. Mar^tory parameters of fixed 
length are placed in the mandatory fixed part 46 (for an 
lAM, these are the Nature of Connectkxi parameter, the 
Fonward-call Indicators, the Calling Party Category pa- 
rameter, arKJ the Transmission Medium Requirement 
parameter). Mandatory parameters of variable length 
are placed in the variable mandatory part 47 (for an I AM. 
there Is only one such parameter, namely the Calling- 
Party Number). Optkxial parameters are placed in the 
optkxial part 48 (for an lAM, these are the Calling-Party 
Number and User-to-User informatkxi). 

Number Portabilltv Service 

The general process of servbe proviskxi in a mod- 
ern PSTN has already been outlined above, this process 
involving the generatkxi by an SSP of a servk;e request 
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that is then passed to service control functionality (gen- 
erally either in the form of an SCP or an Adjunct). To 
facilitate an understanding of the context of the present 
invention, a more specific example of a known service 
will next be described. 

A service that is currently attracting much attention 
is number portability. The reason for this interest is that 
Local Number Portability (LNP) has become a regulato- 
ry requirement in the USA. LNP is intended to allow sub- 
scribers to move between LECs (Local Exchange Car- 
riers) whilst retaining their existing telephone numbers, 
within a rating area. 

AT&T has proposed an LNP solution using a Loca- 
tion Routing Number (LRN). This solution relies on 
switched-based triggers to reference service control 
functionality In standard manner. The solution requires 
modification to the iSUP I AM message to add in a Ge- 
neric Address Parameter (GAP) and a Forward Call In- 
dicator (FCI). The general operation of the LRN number 
portability proposal will become clear from the following 
description given with reference to Figure 5. 

In Figure 5. party A Is connected to switch E01 of 
earner CI ("EO" standing, of course, for "End Office"). 
Parly B was previously connected to switch E02 of car- 
rier CI but has now ported (moved) to carrier C2 and Is 
currently connected to switch E03 of carrier C2. Before 
B ported to carrier C2. B*s number was V08-444-1 234". 
the V08-444" part of this number artdicaling the switch; 
when A dialled B. the swftch E01 simpjy routed the call 
direct to switch EQ2 based on the "444" part of the di- 
alled number. After B has ported, B is connected to 
switch E03 which is identified by "708-555". The objec- 
tive of number portability is to enable A to continue to 
dial B using the number "708-444-1234" (it being appre- 
ciated that the "708' part of the number will not need to 
be dialled by A). The operations that follow the dialling 
of "444-1234" by A will now be described, these opera- 
tions being indicated by bracketed reference numbers 
in Figure 5: 

(1 ) E01 examines the dialled digits arKJ determines 
that the dialled number (DN) relates to switch E02 
which is a donor EO (that is, some subscrft>ers have 
been ported from this EO). Of course, carrying out 
this determination requires that every switch must 
perform an internal lookup to determirte whether the 
DN is destined for a donor EO. 

(2) . (3) An LNP SCP database kx)kup is now per- 
formed to determine if the Called Party Number 
CdPN is ported (typically, this query will be routed 
via an STP as illustrated). 

(4), (5) The SCP returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 
(6),(7) Assuming the DN is for a ported customer, 
then E01 must route the call based on the LRN rout- 
ing tables. The chosen route will generally t)e via an 



Access Tandem as the call is destined for a different 
carrier. Once a route is selected, switch E01 pre- 
pares an I AM with the following substitutions: 
CdPN=:LRN, GAP=DN and FC1=LNP Query Done. 

5 The lAM is then transmitted. 

(8) When the I AM an-ives at the recipient switch 
£03, a check is performed on the FCI and GAP. This 
check indicates that the I AM relates to a ported cus- 
tomer and so E03 must substitute CdPN=GAP and 

10 then perform a kx;kup on the CdPN to establish the 
physical connection to the CPE (Customer Premis- 
es Equipment). 

As described, the above method relies on the orig- 
inating switch (here E01 ) querying a LRN database be- 
fore initiating every call. Considering the small number 
of customers who are expected to port their numbers, 
this approach (the "originating trigger" method) results 
in highly inefficient use of valuable network resources. 

20 As an alternative, the originating switch can be arranged 
to attempt to terminate each call to the switch indicated 
in the dialled number DN; most calls will complete suc- 
cessfully and only in the event that a call fails because 
of a call attempt to a ported DN will a LRN database 

2S lockup be made. This second approach is referred to as 
the "call dropback" method as It involves a failed call 
being dropped or released back to the originating 
switch. There are two main versbns of the call dropback 
method which differ in where the LRN lockup \s done. 

30 In the first versnn, the donor switch (i.e. the switch 
where the ported number origirially resided) does the 
kx>kup and passes back the LRN to the originating 
switch in an enhanced release message. In the second 
version, It is the originating switch that does the kx:kup 

35 after receiving a release message from the donor switch 
indrcating that the DN has ported. Whilst either version 
of the call dropback method is relatively efficient in its 
use of resources, a user calling a ported customer ex- 
periences an increase in post-dial delay because two 

40 calls must be initiated before one is completed. 

It will be appreciated that the above-described LNP 
methocte require modification to the existing switch soft- 
ware as well as to the SCPs. Such modificatkxis sire dt- 
ten extremely expensive and time consuming. The 

45 same shortcomings are apparent for other new services 
it is desired to implement. 

It is an object of the present inventkxi to provide a 
method of implementing services in a switched telecom- 
municatkxis network that is less costly an6 has less ef- 

50 feet on existing infrastructure than the standard method 
of implementation described above. A separate object 
of the present inventk>n Is to provkle a simple message 
interceptor that can be used in the method of the present 
invention to intercept inter-exchange signalling messag- 
es es. 
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Summary of the Invention 

According to the present invention, there is provid- 
ed a method of providing a service in respect of a call 
in a switched telecommunications system that compris- 
es a bearer network with a plurality of switching points 
for setting up calls through the bearer network, and a 
signalling system with a plurality of links by means of 
which circuit-related control messages can be passed 
between the switching points tor regulating call setup 
and release; saki method comprising the steps of: 

(a) - intercepting sakJ circuit-related control mes- 
sages, 

(b) - for each intercepted control message, access- 
ing service trigger data to ascertain whether service 
implementatbn acXton is required in respect of the 
call associated with the control message, 

(c) - where step (b) indk^ates that service implemen- 
tation action is required, rrKxIifying the correspond- 
ing control message, and 

(d) - forwarding on the intercepted control messag- 
es over the sigr^alling network. 

According to another aspect of the present inven- 
tion, there is provkJed a message interceptor for inter- 
cepting and modifying messages passing over a signal- 
ling link according to a link-level protocol operated be- 
tween the link end points, saki message interceptor ef- 
fecting its operation without providing a link-level tenmi- 
natkxi. 

Brief Description of the Drawings 

Methods of providing a service in a switched tele- 
communk:atky)s system, and a message interceptor, 
embodying the inventkxi will rK>w be descrit>ed, by way 
of nonlimiting example, with reference to the accompa- 
nying diagrammatic drawings, in whk:h: 

Figure 1 Is a diagram illustrating the main compo- 
nents of a standard SS7 signalling system; 
Figure 2 is a diagram illustrating the basic architec- 
ture of the SS7 protocol; 

Figure 3 is a diagram showing the format of an SS7 
message signalling unit (MSU); 
Rgure 4 is a diagram of the signalling information 
field of an ISUP MSU; 

Rgure 5 is a diagram showing the operatk)ns in- 
volved in implementing the switch-based LRN 
number portability proposal described above; 
Figure 6 is a diagram showing the operatkxis in- 
volved in implementing number portability in a first 
embodiment of the inventk)n, for a customer who 
has ported out; 

Figure 7 is a diagram showing the operations in- 
volved in implementing number portability in a sec- 
ond embodiment of the inventkxi, for a customer 



who has ported in; 

Figure 8 is a diagram showing the operations in- 
volved in implementing number portability in a third 
embodiment of the invention, for a customer who 
has ported out from the same local exchange as a 
caller; 

Figure 9 is a diagram showing the operations in- 
volved in implementing number portability in a 
fourth embodiment of the invention, for a customer 
who has ported out; 

Figure 10 is a diagram showing the operatkxis in- 
volved in implementing number portability in a fifth 
emtxxiiment of the invention, using enhanced re- 
lease messages, for a customer who has ported 
out; 

Figure 11 is a diagram showing the operations in- 
volved in implementing automated call interceptbn, 
in a sixth embodiment of the invention; 
Figure 12 is a diagram showing the operations in- 
volved in implementing autonnated fraudulent call 
interception, in a seventh embodinrtent of the inven- 
tton; 

Figure 13 is a diagram showing the operatk>nal 
placement of the message interceptor; 
Figure 14 is a time diagram illustrating the delay 
Tpmsu introduced by the message interceptor; and 
Rgure 15 is a block diagram showing the main 
functional units of the message interceptor. 

Best Mode for Carrying Out the Invention 

Emtxxjiments of the present inventkxi relating to 
the provisbn of partbular services will now be described 
with reference to Figures 6 to 12 of the accompanying 
drawings. All these emtxxJiments utilise a message in- 
terceptor disposed in a signalling link of a PSTN that has 
an SS7 signalling network. The message interceptor 
serves to detect calls for whbh service implementatbn 
is required, this detection being done by comparing in- 
tercepted circuit-related signalling messages with serv- 
ice trigger conditior^. These trigger corKlitions include 
message type which the message interceptor can gen- 
erally check directly itself, and message content (such 
as called number) which the message interceptor may 
check by referencing a database. Once senfk:e tnople- 
mentatkxi has been detected as required, two different 
approaches are possible. According to a first approach, 
the message interceptor not only serves to detect calls 
for which service provision is required, but also effects 
at least part of the sen^ice provisbn by modifying pa- 
rameters of the intercepted messages. In the second 
approach, the message interceptor re-directs to a serw- 
\ce control function those messages which it detects as 
calling for sewbe implementatkxi. 

A preferred form of message interceptor is de- 
scribed with reference to Figures 1 3, 14 and 15. 
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Service Implementation Examples 

The first service to be considered below is local 
number portability (LNP) effected using Location Rout- 
ing Numbers. Four possible situations will be described 
with reference to Figures 6 to 9 as follows: 

Figure 6 Customer A calling Customer B who has 

ported out from earner 1 to carrier 2; 
Figure 7 Customer A calling Customer B who has 

ported in from earner 2 to carrier 1 ; 
Figure 8 Customer A calling Customer B who has 

ported out from the same local exchange 

as A (carrier 1 ) to carrier 2; 
Figure 9 Customer A calling Customer B who has 

ported out from carrier 1 to carrier 2. 

The embodiments of Figures 6 to 8 all use the aforesaid 
first approach to service provision whereas the Figure 
9 embodinnent uses the second approach. It will be ap- 
preciated that the second appro^h could also be used 
in other situations (e.g. those corresponding to Figures 
7 and 8). 

Figure 10 illustrates a third approach according to 
the invention for providing LNR this approach being sim- 
ilar to the call dropback method previously mentioned; 
Figure 10 relates to the same situation as Figure 6 but 
it will be appreciated that the variant method could 
equally be applied to the other situations descrft>ed. 

LNP - Customer 8 Ported-Out (Figure 6) 

Party A (E01 ) is attempting to contact B wfto has 
now ported from carrier 1 (E02) to carrier 2 (E03). The 
objective is to deliver the call to party B on E03 using 
the original carrier 1 number. 

(1 ) E01 simply launches an I AM to E02 based on 
the DN received from party A. A speech path is set- 
up between E01 and E02. 

(2) A message interceptor intercepts the MSU traffic 
from the links between E01 and the STP. Tbis is 
done on a per-ltnk basis. For each lAM detected, an 
LNP database kx)kup is perfonrrted across a data 
network to determine if the Called Party Number 
(CdPN) is ported. 

(3) The datat)ase returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. However, if the customer has ported the LRN 
will be different from the original CdPN. 

(4) Assuming the DN is for a ported customer, the 
message interceptor will substitute the lAM 
CdPN=LRN, GAP=DN and FCI=LNP Query Done 
and retransmit the MSU to E02. 

(5) -(8) When E02 receives the lAM it will see a 
CdPN=LRN and attempt to complete the call via an 
Access Tandem. A speech path will be reserved 
across E01-E02-AT-E03. 



(9) When the lAM arrives at the recipient EOS, a 
check is performed on the FCI and GAP. Based on 
this, E03 must substitute CdPN=G AP and perform 
a lookup on the GAP to establish the physical con- 
s nection to the CPE. 

LNP - Customer B Ported-in (Figure 7) 

Party A (E01 ) is attempting to contact B (new car- 
10 rier 1 customer) who has ported from carrier 2 (E03) to 
carrier 1 (E02). The objective is to deliver the call to 
party B on E02 using the original carrier 2 number 

(1) Assuming that all calls to a foreign LEC (local 
exchange carrier) will transit through an Access 
Tandem (AT), E01 simply launches an lAM to the 
AT based on the DN received from party A. A 
speech path is set-up between E01 and AT. 

(2) A message interceptor intercepts the MSU traffic 
from the links between E01 and the STP. This is 
done on a per-link basis. For intercepted lAMs, an 
LNP database lookup is perfonmed across a data 
network to determine if the Called Party Number 
(CdPN) is ported. 

(3) The database returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN. IHowever, if the customer has ported the LRN 
wilt be different from the original CdPN. 

(4) Assuming the DN is for a ported customer, the 
rrtessage interceptor will substitute the lAM 
CdPN=LRN, GAP =DN and FC1=LNP Query Done 
and retransmit the MSU to AT 

(5) , (6). (7) When AT receives the lAM it will see a 
CdPN=LRN and attempt to complete the call to 
E02. A speech path will be resented across 
E01-AT-E02. 

(8), (9) A message Interceptor intercepts the MSU 
traffic from the links between STP and E02, This is 
done on a per-link basis. The message interceptor 
performs a check on the FCI and GAP. Based on 
this, the message interceptor must substitute 
CdPN=GAP and remove the GAP and FCI. The call 
will then be delivered to E02 for call processing and 
completkxi to party B via the normal translatk)n 
processes. 

LNP - Customer B Ported-Out From A's EO (Figure 8) 

Party A (E01) is attempting to contact B who has 
ported from carrier 1 (E01 ) to earner 2 (EOS). The ob- 
jective is to deliver the call to party B on E03 using the 
original carrier 1 number. If B had not ported, the call 
between party A and B would be handled intra-switch 
and there would be no extemal SS7 signalling for call 
set-up. 

The basis of the service is to detect all intra-switch 
calls to a ported number by proviskxiing a call f onward 
number to the original subscriber number. The only ex- 
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ception is that the Numbering Plan Area (NPA) compo- 
nent of the number will have a unique assignment which 
will be reserved for intra-l_ATA (Local Access & Trans- 
port Area) LNP purposes. For this example, assume that 
this special NPA code is 777. 

(1 ), (2) E01 receives the DN and performs standard 
calMonvarding to the original dialled number with a 
special NPA code of 777 preceding the DN. An I AM 
is launched to the AT which acts as a special gate- 
way for such types of call. A speech path is set-up 
between E01 and AT 

(3), (4) A message interceptor intercepts the MSU 
traffic from the links between STP and AT This 
would be done on a per-link basis. An LNP data- 
base lookup is now performed across a data net- 
work to detennaine if the Called Party Number 
(CdPN) is ported. 

(5) The database returns an LRN. For non-ported 
customers the LRN will be the same as the original 
CdPN- However, if the customer has ported the LRN 
will be different from the original CdPN. 

(6) Assuming the DN is for a ported customer, the 
message interceptor will substitute the lAM 
CdPN=LRN, GAP^DN (with the correct LATA NPA 
code) and FCI=LNP Query Done, and retrarismit 
theMSUtoAT 

(7) , (8) When AT receives the lAM it will see a 
CkiPN=LF{N and attempt to complete the call direct- 
ly to E03. A speech path will be reserved across 
E01-AT-E03. 

(9) When the lAM arrives at the recipient E03, a 
check is performed on the FCI and GAP Based on 
this, E03 must substitute CdPN=GAP and perform 
a kx)kup on the GAP to establish the physical con- 
nection to the CPE. 

LNP - Customer B Ported-Out (Figure 9) 

Figure 9 shows how the aforesaid second approach 
to service implementatkyi can be applied to the situation 
which was dealt with in Figure 6 by using the first ap- 
proach to servce implementation. In this second ap- 
proach, the message interceptor is dedicated to modh 
tying the DPC and an adjunct is reserved for performing 
the LRN transtatkins. The benefit of this approach is ttiat 
we can re-route messages to standard IN elements for 
call processing. As will be seen, this approach requires 
the message interceptor and adjunct to access a shared 
datat>ase. 

Party A (E01 ) is attempting to contact B who has 
now ported from carrier 1 (E02) to carrier 2 (E03). The 
objective is to deliver the call to party B on EOS using 
the original carrier 1 nunnber 

(1) E01 simply launches an I AM to E02 based on 
the DN received from party A. A speech path is set- 
up between E01 and EQ2. 



(2), (3) A message interceptor intercepts the MSU 
traffic from the links between E01 and the STP. This 
would be done on a per-link basis. An LNP data- 
base kxjkup is now performed across a data net- 
s work to determine if the Called Party Number 
(CdPN) is ported. If the DN is a ported number, a 
copy of the lAM is stored in a shared database and 
the DPC of the I AM changed to that <^ the LNP ad- 
junct processor. If the DN is a non-ported number 
10 the call proceeds as normal. 

(4), (5), (6) As the original DPC of this MSU was 
corrupted by the message interceptor, the LNP ad- 
junct must access the shared database to recall the 
original DPC in order to determine the correct des- 
tinatbn for this MSU (i.e. E02). 
(7), (8), (9) The LNP adjunct now performs an LNP 
database lookup to perform the LRN translations 
I AM CdPN=LRN, GAP=DN and FCI=LNP Query 
Done. The lAM is then retransmitted to E02. 
(10)-(12) When E02 receives the lAM it will see a 
CdPN=LRN and attempt to complete the call via an 
Access Tandem. A speech path will be reserved 
across E01-EQ2-AT-E0a 
(13) When the I AM arrives at the recipient E03, a 
check is performed on the FCI and GAP. Based on 
this, EOS must substitute CdPN=GAP arxJ perform 
a lookup on the GAP to establish the physical con- 
nection to the CPE. 

LNP - Customer B Porled-Out - Release Message 
Loopback (Figure 10) 

Although the foregoing methods of providing LNP 
have the advantage of avoiding the need to update the 
originating switch, they suffer from the disadvantage 
that they may consume rrK>re trunk resources than strict- 
ly necessary. This is because a call to a ported nunrtt>er 
may first be routed to the wrong destination switch. In 
order to overcome this drawback, the message inter- 
ceptor can be arranged to generate a message similar 
to the enhanced release rrtessage already descrit>ed in 
respect of one form of the call dropback method for LNP 
provision. More particularty, the message interceptor 
carries out a check on each received lAM to determine 
if it relates to a ported number and if it does, the relevant 
LRN is returned to the originating switch in an enhanced 
released message. The mechanism used to direct the 
enhanced release nnessage back to the originating 
switch is to swap the destir^tk>n and source point codes 
of the received I AM and forward it as an enhanced re- 
tease message so that the next signalling point encoun- 
tered by the message (generally an STP) will route the 
message back to the originating switch. TTiis switch then 
dealktcates the trunk initially alkx^ated for the call and 
then tries again using the LRN retumed in the enhanced 
release message as the called party number The new 
lAM sent out by the switch has its FCI set to indicate to 
the message interceptor that a lookup has already been 
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done on the message so the interceptor will just pass rt 
on. 

The advantage of this approach as compared to the 
standard call dropback method is that it minimises the 
post-dial delay experienced by the caller before being s 
connected. 

Figure 10 illustrates the looping back by the mes- 
sage interceptor of an enhanced release message for 
the same situatbn as shown in Figure 6, namely Party 
A (E01) is attempting to contact B wtK> has now ported 
from carrier 1 (EQ2) to carrier 2 (EOS). As before, the 
objective is to deliver the call to party B on EOS using 
the original carrier 1 number. 

(1) E01 starts by launching an I AM to E02 based 
on the DN received from party A. A speech path is 
set-up between E01 and E02 (shown dashed in 
Figure 1 0 because it is taken down before call com- 
pletion). 

(2) A message interceptor intercepts the MSU traffic 
from the links between E01 and the STP. This is 
done on a per-link basis. For each lAM detected, 
unless the lAM already has its FCI set to Query 
Done, an LNP database kx)kup is performed across 
a data network to determine if the Called Party 
Number (CdPN) is ported. 

(3) The database returns an LRN. For non-ported 
customers the URti will be the same as the origtnal 
CdPN. hiowever, if the customer has ported the LRN 
will be different from the original CdPN. 

(4) Assuming the DN is for a ported customer, the 
message interceptor will rrKxtify the lAM to an er>- 
hanced release message including the LRN arKi will 
swap the source and destination point codes before 
retransmitting the MSU to the STP. 

(5) The STP kxjps the enhanced release message 
back to E01 whch dealk^cates the trunk to E02. 

(6) ,(7) E01 now sends out a new lAM with the 
CdPN set to the LRN received in the enhanced re- 
lease message. GAP set to DN and FCI set to Query 
Dor^. A speech path is reserved between E01 and 
the Access Tartdem. The message interceptor on 
receiving the lAM recognises that the FCI is set to 
Queiy Done so it simply passes on the lAM to the 
STP 

(8).(9) The TAM is passed via the Access Tandem 
to EOS arui a speech path will be resented between 
AT and EOS. 

(10) When the I AM arrives at the recipient EOS, a 
check is performed on the FCI and GAP. Based on 
this, EOS must substitute CdPN=:G AP and perform 
a kx>kup on the GAP to establish the physical con- 
necton to the CPE. 

Automated Call Intercept (Figure 11) 

The next service to be described provdes an auto- 
matic method for intercepting call attempts from a list of 



subscribers. The proposed sewice will seamlessly in- 
tercept and record (via an Intelligent Peripheral - IP) all 
call attempts from users held in a secure agency data- 
base. Service impiementatkxi involves the aforesaid 
second approach though, of course, the first approach 
would also be possible. 

An Intelligent Peripheral platform with appropriate 
interfaces is used in this embodiment. The call intercept 
feature can be activated on either the Calling Party or 
Called Party numbers and based on time of day (if re- 
quired). 

(1) ,(1a),(1b) A call attempt by a targeted user will 
be progressed by the EO as normal. A message in- 
terceptor will intercept the 1AM which performs a 
search of the intercept datak)ase using the CgPN or 
CdPN (etc.). If the call is NOT on the intercept list, 
the call will be routed to the CdPN in the usual way. 

(2) , (3) However, if an intercept match is found, the 
DPC of the I AM will be changed to route the call to 
an adjunct or Sen/ice Node (SN). The original I AM 
is stored in a shared database such that the original 
DPC can be recovered when the call must be com- 
pleted to the intended DPC (E02). 

(4 - 7) At the SN the CdPN will be modified to direct 
the call to an IP (whk:h couki be owned by an au- 
thorized agency) via E02. The original I AM will be 
fetched from the shared database to determine the 
DPC for completing the call. 
(8 - 12) As the IP will be a shared resource, it is 
likely that calls must be routed via an access tan- 
dem AT. Hence, E02 will forward the call to AT and 
subsequently onto the IP A contin uous speech path 
will now be reserved between E01 -E02-AT-IP (see 
references 1 , 9, 11 in square brackets). 
(13), (14) Having terminated the A-leg of the call, 
the IP must then establish the original CdPN to 
which the call should be corrtpleted (B-leg). This in- 
fonmation can be retrieved from the adjunct using 
either Advanced Intelligent Network (AIN) or some 
variant protocol. (Note: Some ISUP implementa- 
Xions have a diverted nurnber field which the adjunct 
coukJ use to store the original CdPN). 
(15-18) Having determined the original CdPN. the 
I P will originate an I AM with CgPN set to the original 
calling party number A (Note: In case CLASS - Cus- 
tom Local Area Signalling Sen^ice - servrces are ac- 
tive) in order to complete the B-leg of this call. The 
lAM will be delivered to E02 based on the CdPN 
via an access tandem. Speech paths for the B-leg 
will be alkx:ated in the order IP-AT-E02 (see refer- 
ences 15, 17 in square brackets). 

Once the call is answered, the IP can use a S-way 
brkJge to provide a continuous speech path between A 
and B, whilst activating a voice peripheral to record the 
call. All of this wouki happen seamlessly The conver- 
sation could be reviewed in real-time, or the recorded 
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message can be voice mailed to the interested party. 
Many options exist for the review and notrficatton (i.e. 
Voice-to-Text and then E-mail, or Paging, etc.). 

Call Intercept - Fraud (Figure 12) 

This service provides an automatic method for in- 
tercepting call attempts from a list of fraudulent sub- 
scribers. The service will seamlessly intercept call at- 
tempts to or from users held in a fraud database. The 
information in this database could be updated in real- 
time. 

An Intelligent Peripheral platform with appropriate 
interfaces is used in this embodiment. The call intercept 
feature can be activated on either the Calling Party or 
Called Party numbers and based on time of day (if re- 
quired). 

(1) ,(1a),(1b) A call attempt involving a fraudulent 
user will be progressed by the EO as normal. A mes- 
sage interceptor will intercept the I AM which per- 
fonms a search of the fraud database using the Cg- 
PN or CdPN. If the call is NOT on the fraud list, the 
call will be routed to the CdPN in the usual way 

(2) , (3) However, if an intercept match is found, the 
DPC of the lAM will be changed to route the call to 
an adiuTvA or SN. The original lAM is stored in a 
shared database such that the original DPC can be 
recovered when the call must be completed to the 
intended DPC (EQ2). 

(4 - 7) At the SN the CdPN wiU be modiHed to direct 
the call to an IP via E02. The original lAM win be 
fetched from the shared database to determine the 
original DPC for completing the call. 
(8 - 12) As the IP will be a shared resource, it is 
likely that calls must be routed via an access tan- 
dem AT Hence, E02 will forward the call to AT and 
subsequently onto the IP. A continuous speech path 
will now be reserved between E01-EQ2-AT-IP (see 
referer)ces 1. 9, 11 in square brackets). 

On receiving the lAM, the IP can then play an an- 
nouncement to the calling party based on the CgPN or 
CdPN. The IP can extract the original CdPN from the 
diverted address fiekl. 

— If the CgPN is the fraudster the IP could play "... you 
am cunentty barred f/om using the networfC. 

— If the CdPN is that of the fraudster the I P cou W play 
"... you are currently catiing a barred usef. 

The Message Interceptor 

The message interceptor can be of the general form 
described in EP-A-0 669 771 in which a signalling link 
is effectively split into two links by the interceptor, the 
interceptor operating independent tink-level protocol en- 
gines for exchanges with the two ends of the interrupted 



link. A message interceptor of this form whilst effective, 
is relatively complicated. A simpler form of message in- 
terceptor will now be described below with reference to 
Figures 13, 14 and 15. 

^ Figure 13 illustrates the general disposition of a 
message interceptor 60 in one channel 61 of a bi-direc- 
tional link between an SSP and an STR this channel 61 
passing messages from the SSP to the STP. Messages 
on the channel 61 are routed through the message in- 

^0 terceptor 60 and in effect enter a delay pipe subjecting 
them to a delay Tp^^y (see Figure 1 4 which depicts both 
a message P flowing from SSP to STP along the chan- 
nel 61 and a return message Q flowing in the opposite 
directbn on the channel 62 which does not pass through 

>5 the interceptor 60 so there is no delay Tp^gu t^'® chan- 
nel). 

A bypass relay arrangement 65 permits the inter- 
ceptor 60 to be bypassed in fault conditions and in this 
case there will, of course, be no delay Tp^ in messag- 
20 es passing akxig the channel 61 (see message R in Fig- 
ure 14). 

A key feature of the message interceptor is that it 
does not modify MTP Level 2 state-t)ased protocol pro- 
cedures viz. backward error correction and flow control; 

2S it may. however, modify error checking and delimitation 
procedures which are stateless transformations. 

The act of switching the relay arrangement 65 to 
bypass the interceptor 60 in the event failure will be 
seen as bit errors which are corrected by level 2 back- 

30 ward error correctkx) procedures in the STP arKi SSP 
Thus the SSP and STP will generally remain in synchro- 
nism in the event of failure of the interceptor 60. 

During normal operation of the message intercep- 
tor, as messages pass through the interceptor they are 

3S examined by comparing their type and the values of par- 
ticular parameters with sen^ice trigger condition data to 
see if service implementation action is required; if it is, 
then the message corKremed will be nrxxiified. As al- 
ready mentbned, generally at least certain of the trigger 

^ condition data wilt be stored in a database 66 (possibly 
on an external server) though where appropriate a local 
cache memory may be provided of sufficient size to hoW 
the database. 

Figure 15 is a furKrtbnal bkx:k diagram of the mes- 

45 sage interceptor 60. The message interceptor corrtpris- 
es the folk>wing units: 

Relays 65A, 65B These are the bypass (or pass- 
thru) relays for bypassing the interceptor when non-op- 
erational. The relays are controlled by a supervision unit 

50 71 (see below). 

Clock recovery unit 70 This unit recovers ckx:king 
informatton from the line 61 to synchronise operatkxi of 
the units of the interceptor (in particular, units 72 and 
74) with the line 61 . 

^ Delimitation, alignment detection and error de- 
tection (recehm) unit 72 This unit senses to read in 
messages from the line 61 -in; to this end. the unit 72 
carries out the following functkxis: 
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— acquires MTP L2 message frames de-limited by 
flags and strips bits inserted for data transparency; 

— checks each frame meets MTP 12 criteria for frame 
length and that the CRC-16 check is correct; such 
frames are tagged as 'good'; s 

— traffic whrch fails the above criteria is tagged as 'er- 
rored'; 

— in either case traffic is appended to a delay pipe 73 
(see bekjw) an octet at a time. 

10 

Delay Pipe 73 As already indicated, the intercepted 
messages are effectively passed through a delay pipe; 
in practice, this "pipe' is implemented by storing the 
messages in known memory locations and using point- 
ers to provide a delay pipe type function. is 

Delimiter Insert, mimic alignment and error 
check insert (transmit) unit 74 This unit serves to out- 
put messages from the delay pipe 73 onto the tine 
61 -out; to this end, the unit 74 carries out the folk)wing 
functions: 20 

— delimits frames with flags; 

— inserts stuffed bits for data transparerK:y; 

— calculates the CRC-16 check for the frame; ap- 
pends the CRC-16 check to frames tagged as 
'good*; appertds the ones complement of the CRC- 
16 check to frames tagged as bad; 

— tracks the alignment of the receiver; if an event oc- 
curred whk:h caused the receiver to enter octet 
counting nrxxle (kyig frame, abort, short frame) then 30 
it is reptk^ted by the trarismitter 

Timestamping Unit 77 Message frames are times- 
tamped on receipt of the first octet, the timestamp reg- 
ister being driven by the recovered clock information 35 
from the unit 70, A watchdog timer checks if the times- 
tamp register is running and instructs the supervision 
unit 71 (see below) to place the relays 65A, 65B in pass- 
thru (bypass) mode if no ckx^k is found. 

Lookup candidate selection unit 75 This unit has 
I SUP protocol krtowledge to alk>w it to detect partk:ular 
message types (notably, but without limitation, lAMs) 
arKi to extract the parameter values ol interest (notably, 
but without limitation, called party numbers). The unit 75 
will initiate a lookup in the database 66 (Figure 13) ^ 
against the extracted parameter value as soon as the 
latter is available. Lookups can be distributed between 
senders e.g. by using the first digit 6f a kxal number to 
decide whk;h server to use. Fault tolerant lockups are 
also feasible by effecting multicast lookup to primary so 
and secondary senders. Lookups may be transmitted via 
a LAN to a server or may be directed to a cache on board 
the interceptor Only messages tagged as good are ex- 
amined by the unit 75, those tagged as bad being 
passed through the interceptor unchanged. ss 

Substitute lookup responses Unit 76 This unit ef- 
fects any required modification to a message, either by 
changing particular parameter values or by changing 



the destination point code of the message. If the 
changed parameter is a variable length one (or indeed, 
if optional parameters are added) then the change may 
cause the message frame length to increase. It is the 
responsibility of the unit 76 to make any required adjust- 
ments to the length indrcators and to the messages' in- 
ternal pointers. 

Bandwidth balance Unit 78 This unit checks if the 
timestamp of the frame at the head of the delay pipe 73 
was received at a time intenral T^^nsu 0^^® P'P® ^^'^y 
constant) before the time currently shown in the times- 
tamp register. Let us call this difference T^^^ The unit 78 
endeavours to keep the delay through the interceptor as 
constant as possible to prevent excessive jittering of the 
link throughput whk;h could make queuing delays at the 
STP erratic and subsequent nnodelling difficult. The unit 
78 operates according to the folbwing rules: 

- if the difference is equal to or slightly greater than 
^pmsu frame is passed to the transmit unit 
74; 

- if the difference is significantly larger than Tp,^ 
then the delay pipe has grown owing to an increase 
in length of the precedhg frame which in turn was 
caused by a lookup substitutbn. Several strategies 
are available to recover bandwidth and these are 
applied in the folk)wtng order 

1. Use gaps between frames: if the time dif- 
ference between the timestcimps of the first and 
second messages (frames) in the queue is 
greater than the time it would take to transmit 
the first message in the queue, then the first 
message is passed to the transmit chain. The 
net effect on the link is a delay in receiving the 
message equal to the time it took to transmit 
the octets added to the previous message. 

2. Delete a RSU: if there is a FISU at the head 
of the queue then it can be deleted without be- 
ing transmitted, without affecting L3 data flow, 
because all the folk>wing conditions hold: 

(a) FISUs doni transfer L3 data; 

(b) the FSN infonmatkxi is only signifk:ant 
forMSUs; 

(c) the FIB indk:ation \s only significant for 
MSUs; 

(d) the BSN acknowledgement is caught by 
the BSN of the next frame; 

(e) the BIB indk^ation is replicated in the 
BIB of the next frame; and 

(f) a frame must be foltowing (thus guaran- 
teeing (d) and (e)). because strategy 1 
above failed. 

3. Delete FISU and shift back: if an FISU can 
be found in the queue then it can be deleted 
according to the procedure above. The times- 
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tamps of all frames which precede the deleted 
FISU should be incremented by the time it 
would take to transmit the FISU. 
4. Delete an MSU: by deleting an MSU at the 
head of the queue, bandwidth for the preceding 
frame will be allocated. The MTP flow control 
procedure at the STP side of the message in- 
terceptor will then detect a missing sequence 
number and request re-transmisston. 

Supervision unit 71 This unit monitors both the in- 
coming and outgoing streams and if any of the situations 
listed below occurs then the relays 65 A, 65B are re- 
tumed to pass-thru mode: 

1 . Error condrtbns are not passed through 

2. Frames experience a delay significantfy less than 
or greater than 

3. A sequence of two or more frames arriving on the 
incoming stream has two or more frames deleted 
on the outgoing stream 

4. An ISUP message encoding rule has been bra- 
ken on the traffic on the outgoing stream 

5. An excessive number of re-transmitted frames is 
received on the incoming stream. (This may be due 
to a hardware failure in the trar^smitter so the unit 
should be taken out of servk:e as a precautionary 
measure). 

It will be appreciated that the part of the message 
interceptor responsible for message input and output, 
the delay pipe, servce trigger checkirtg, arwJ message 
modification, can be replicated and arranged in parallel 
to provide protection of the link during board swaps etc. 
The message modification portion of the interceptor 
nrtay be replicated by itself with the replicated portions 
being arranged in parallel to increase modification 
throughput. 

The message interceptor 60 is described in further 
detail in our coperKling UK patent applicatkxi no. 96 15 

998.3. 

Variants 

It will be appreciated that many variants are possi- 
ble to the above described embodiments. Thus, for ex- 
ample, rather than intercepting the signalling messages 
as they pass akxig a link, they couki equally be inter- 
cepted as they pass through an STP; the mechanisrr^ 
involved in intercepting messages at an STP are very 
similar to those described in EP-A-0 669 771 . 

It will further be appreciated that although the 
present invention has been described above in relation 
to implementatkxi of number portability and call inter- 
cept servces, the above-described inventive concepts 
can be applied to the implementation of other sen/ices 
that can be triggered off the deteclkxi of circuit-related 
or other signalling messages. In particular, the message 



interceptor described with reference to Figures 1 3 to 1 5 
can be used to implement many different sen^ices. Fur- 
thermore, the generation and kxjpback of a release 
message by the message interceptor on the basis of 

s particular setectbn criteria being satisfied, can be ap- 
plied to other sen^ices additkxial to LNP; in such cases, 
the returned message need not be restricted to a re- 
lease message but coukJ be any type appropriate to the 
applbatkxi concerned. 

10 Although the above descriptkxi relates to an SS7 
signalling network, it will be appreciated that the mes- 
sage interceptor and the method of the invention couW 
be arranged to operate with other, similar, signalling net- 
works. In particular, it is possible to vary the physk:al 

15 and link levels from those generally specified for an SS7 
network. Thus the message interceptor and method of 
the invention may be applied to a signalling networic in 
whk:h the bask; link transport nrtechanism is based on 
ATM technology, the higher levels still being SS7 con- 

20 formant. 



Claims 

25 1 . A method of providing a service in respect of a call 
in a switched telecommunk:atk>ns system that com- 
prises a bearer network (12) with a plurality of 
switching points (SSP) for setting up calls through 
the bearer network, and a signalling system with a 

30 plurality of links (18) by means of whch circuit-re- 
lated control messages can be passed between the 
switching points for regulating call setup and re- 
lease; said method comprising the steps of: 

35 (a) - intercepting (60) said circuit-related control 

messages, 

(b) - for each intercepted control message, ac- 
cessing senrice trigger data to ascertain wheth- 
er sen/k:e implementatk>n actkxi is required in 

^ respect of the call associated with the control 

message, 

(c) - where step (b) indcates that service im- 
plementation action is required, modifying the 
corresponding control message, and 

45 (d) - fonwarding on the intercepted control mes- 

sages over the signalling network. 

2. A method according to claim 1 , wherein said control 
messages comprise control-message destinatkxi 

50 data and call -related parameters, step (c) involving 
modifying at least one said parameter of sakJ con- 
trol message whereby to effect at least part of the 
required service implementation actk>n. the sakJ 
destinatkxi data of the control message being left 

55 unrTKxJified. 

3. A method according to claim 1 . wherein said control 
messages comprise control-message source and 
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destination data and call-related parameters, step 
(c) involving: 

- modifying at least one said parameter of said 
control message whereby to effect at least part 
of the required service implementation action, 
and 

- replacing said destination data of the control 
message with said source data; 

the originating switching point taking further sen^ice 
implementation action based on the modified said 
at least one parameter upon receipt back of said 
control message. 

4. A method according to claim 3, wherein each said 
control message further comprise a message type 
indicator, step (c) further involving rtKxjifying said 
message type indicator. 

5. A method according to claim 1 . wherein said control 
messages comprise control-message destination 
data and call-related parameters, step (c) involving 
modifying the said destination data of the control 
message to route it to a service control function, the 
said call-related parameters of the control message 
being left unmodified. 

6. A method according to datm 5, wherein step (c) fur- 
ther involves storir^ at teast a part of the control 
message for kxikup by said servkxe control function, 
the stored said at least a part of the control message 
including the unnrxxirfied destination data whereby 
to enable said service control function to ascertain 
the original destination of the control message. 

7. A method according to daim 1 , wherein said control 
messages are of various types and comprise a mes- 
sage-type irKlicator, control-message source as\6 
destination data, and call-related parameters; ssod 
servce trigger data irxiicating for which control- 
message types arxj pararrteter values service inrv- 
plementatkxi action e required. 

B. A method according to claim 7. wherein one said 
message type is an Initial Address message nnclud- 
ing a called-number parameter holding called 
number data, said service trigger data indicating 
that service implementation actnn is required for 
control messages of said Initial Address type that 
have particular values of said called-number pa- 
rameter. 

9. A method according to claim 8, wherein the service 
to be provided is kx:al number portability, step (b) 
involving comparing the type and called number da- 
ta of each intercepted control message with the 
sewice trigger data to ascertain whether said kx^al 



number portability sen^ice is to be implemented. 

10. A method according to claim 9, wherein where step 
(b) indicates that said kx:al number portability serv- 

s ice is to be provided in respect of a called number. 
sakJ accessing of said sen^ice trigger data in step 
(b) returns a location routing nunnber indicative of 
the switching point from which the called party cur- 
rently depends, step (c) involving: 

10 

- setting the called number data in the control 
message to said location routing number. 

- storing the original called number in the control 
message, and 

^5 - setting a flag in the control message to indkjate 
that the called number data is a kx:atk>n routing 
number. 

11 . A HDethod according to claim 9, wherein where step 
20 (b) indk:ates that said kx:al number portability serv- 

k:e is to be provided in respect of a called number, 
said accessing of said service trigger data in step 
(b) returns a kx:ation routing number indicative of 
the switching point from which the called party cur- 
25 rently depends, step (c) involving: 

~ storing the kx:ation routing nunnber in the con- 
trol message; 

- setting the message type indicator to a release 
30 message type; and 

~ swapping the source and destinatk)n data; 

sakJ method further invoh^ing, for each control mes- 
sage received back at the originating switching 
3S point as a release message folbwing nrKxiification 
in step (c), sending out a new control message of 
the Initial Address Message type with its said des- 
tination data set in dependence on saki locatkxi 
routing number, said new control message having 
^ its called number data set to saki kx^ation routing 
nunnber and including both the original called 
number and a flag indcating that the called number 
data is a kxatkxi routing number 

45 12. A method according to claim 9, wherein where (b) 
indk:ates that saki kx:al number portability sendee 
is to be provkied, step (c) involves: 

- modifying the said destination data of the saki 
50 corresponding control message to route it to a 

service control function, and 

- storing at least a part of the control message 
including the unmodified destination data; 

55 saki method including the following further steps for 
each control message received at said sewice con- 
trol functkxi following modification of its destinatbn 
data in step (c): 
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- looking up from said service control function the 
stored said at least a part of the control mes- 
sage whereby to enable said service control 
function to ascertain said unmodified destina- 
tion data of the control message; 

- changing the control message by: 

— setting the called number data in the con- 
trol message to said location routing 
number. 

- storing the original called number in the 
control message, 

— setting a flag in the control message to in- 
dicate that the called number data is a lo- 
cation routing number, and 

- setting the destination data to said unmodi- 
fied destination data, and 

- sending on the changed control message. 

13. A method according to claim 7, wherein one said 
message type is an Initial Address message includ- 
ing party-number data comprising at least called 
number data, and wherein the sen^ice to be provid- 
ed is call interception; said service trigger data in- 
dicating that service implementation action is re- 
quired for control messages of said Initial Address 
type that have parttcutar values for at least part of 
said party-number data, and step (b) involvtng corn- 
paring the type and party-number data of each in- 
tercepted control message with the service trigger 
data to ascertann whether said can interception 
service is to be implemented. 

14. A method according to claim 13, wherein where 
step (b) indicates that said call interception service 
is to be provided, step (c) involves setting the called 
number data in the control message to an IP 
number indicative of an hnteltigent peripheral to 
which the call is to be routed. 

15. A method according to datm 13. wherein where 
step (b) indicates that said call interception service 
is to be provided, step (c) involves: 

- nrxxirfyrng the said destination data of the said 
corresponding control message to route it to a 
service control function, and 

- storing at least a part of the control message 
including the unmodified destination data; 

said method including the folbwing further steps for 
each control message received at said service con- 
trol f urK:tion following rrxxlrfication d its destination 
data in step (c): 

- looking up from said service control f unctbn the 
stored said at least a part of the control mes- 



sage whereby to enable said servrce control 
function to ascertain said unmodified destina- 
tion data of the control message; 
- changing the control message by setting the 

s called number data in the control message to 

an IP number indicative of an intelligent periph- 
eral to which the call is to be routed, and setting 
the destination data to saki unnrxxJified desti- 
nation data, and 

10 - sending on the changed control message. 

16. A method according to claim 14 orl 5, wherein said 
service trigger data indicates that service imple- 
mentation action is required for control messages 

15 of saki Initial Address type that have particular val- 
ues of saki called party number 

17. A nr^thod according to claim 1 4 or 1 5, wherein sakJ 
party-number data of sakJ Initial Address messages 

20 include calling number data, saki service trigger da- 
ta irKlicating that service implementatkxi action is 
required for control messages of said Initial Address 
type that have particular values of said calling party 
number 

25 

18. A method according to claim 1 4 or 1 5. wherein saki 
call interceptkxi service further involves providing 
for the tapping of the con^esporKiing call at saki in- 
telligent peripheral and seeking to connplete the call 

30 from the intelligent peripheral to the called party. 

1 9. A method according to claim 1 4 or claim 1 5, wherein 
saki call interception service further involves play- 
ing a voice message to the calling party from said 

35 intelligent peripheral without completing the call to 
the called party. 

20. A method according to any one the preceding 
claims, wherein the control message interceptkxi in 

^ step (a) is effected in a saki link. 

21 . A method according to daim 20, wherein the pass- 
ing of saki control messages over each said link is 
effected in accordance with a link-level protocol 

45 having state, steps (a) and (d) being effected with- 
out affecting the current state of the link-level pro- 
tocol on the link concerned. 

22. A method according to daim 20. wherein the pass- 
50 ing of saki control messages over each said link is 

effected in accordance with a link-level protocol 
having state, steps (a) and (d) being effected by set- 
ting up independent link-level protocol exchanges 
with each end of the link concerned whereby in step 
55 (a) said control messages are intercepted by recep- 
tkxi from one end of the link in accordance with the 
link-level protocol operated therewith, and in step 
(d) the control messages are forwarded by trans- 
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mission to the other end of the link in accordance 
with the link-level protocol operated therewith. 

23. A method according to any one of claims 1 to 19, 
wherein the control message interceptbn In step (a) s 
is effected at a signalling transfer point. 

24. A message interceptor for intercepting and modify- 
ing messages passing over a signalling link accord- 
ing to a link-level protocol operated between the link io 
end points, said message interceptor effecting its 
operatbn without provkiing a link-level termination. 
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